UK guidance for institutions sponsoring international students has tightened requirements tied to education agents, requiring universities to record agent details on student confirmation of acceptance for studies (CAS) documents when agents are involved. The change is raising compliance and data-use concerns after reporting that the Home Office allegedly would not commit to sharing “bad actor” findings with the sector. Experts say the data could be used to help identify agents whose recruiting outcomes correlate with students failing to enroll, dropping out, or seeking asylum. Sector compliance groups question why the data is being collected if it will not be used directly when assessing applications and if institutions will not receive feedback about later risk designations. The reporting also flags operational risk for universities: institutions could pass due-diligence checks on an agent and later discover the agent has become a concern for the Home Office, potentially triggering heightened scrutiny of connected students. For international admissions and compliance officers, the policy shift is a move toward more granular tracking of recruitment pathways and a new set of governance questions about data sharing, transparency, and risk management.